Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-09 17:58:53.881 00:00:10.382 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2026-01-09 17:59:29.171 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 17:59:29.204 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 17:59:35.507 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50652 10 6452 1 2026-01-09 17:59:54.307 00:00:10.325 TCP 23.104.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2026-01-09 17:55:30.487 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 17:55:30.489 00:05:54.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:00:35.723 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56326 10 6452 1 2026-01-09 18:00:54.670 00:00:10.380 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:01:35.905 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49744 10 6452 1 2026-01-09 18:01:55.103 00:00:10.371 TCP 23.104.0.1:43264 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:02:36.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56234 10 6452 1 2026-01-09 18:02:55.508 00:00:10.370 TCP 23.104.0.1:49980 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:03:36.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57032 10 6452 1 2026-01-09 18:03:55.914 00:00:10.347 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:04:29.404 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:04:29.452 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:04:36.545 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34042 10 6452 1 2026-01-09 18:04:56.303 00:00:10.325 TCP 23.104.0.1:41282 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:05:36.783 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2026-01-09 18:05:56.670 00:00:10.362 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:01:30.489 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:01:30.491 00:05:54.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:06:36.998 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40320 10 6452 1 2026-01-09 18:06:57.101 00:00:10.366 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:07:37.216 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37524 10 6452 1 2026-01-09 18:07:57.503 00:00:10.324 TCP 23.104.0.1:56802 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:08:37.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39894 10 6452 1 2026-01-09 18:08:57.868 00:00:10.367 TCP 23.104.0.1:51430 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:09:29.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:09:29.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:09:37.651 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2026-01-09 18:09:58.269 00:00:10.363 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:10:37.865 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2026-01-09 18:10:58.671 00:00:10.363 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:11:38.060 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57832 10 6452 1 2026-01-09 18:11:59.097 00:00:10.364 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:07:30.490 00:05:54.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:07:30.493 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:12:38.272 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2026-01-09 18:12:59.502 00:00:10.364 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:13:38.487 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50218 10 6452 1 2026-01-09 18:13:59.906 00:00:10.368 TCP 23.104.0.1:55700 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:14:29.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:14:29.412 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:14:38.703 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:55226 10 6452 1 2026-01-09 18:15:00.317 00:00:10.363 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:15:38.910 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45502 10 6452 1 2026-01-09 18:16:00.722 00:00:13.346 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:16:39.120 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34690 10 6452 1 2026-01-09 18:17:04.107 00:00:10.366 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:17:39.295 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40002 10 6452 1 2026-01-09 18:18:04.512 00:00:10.362 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:13:30.495 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:13:30.492 00:05:54.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:18:39.469 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2026-01-09 18:19:04.916 00:00:10.385 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:19:29.633 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:19:29.762 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:19:39.684 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48448 10 6452 1 2026-01-09 18:20:05.343 00:00:10.364 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:20:39.896 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52828 10 6452 1 2026-01-09 18:21:05.749 00:00:10.387 TCP 23.104.0.1:46034 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:21:40.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2026-01-09 18:22:06.176 00:00:10.321 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:22:40.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2026-01-09 18:23:06.538 00:00:10.519 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:23:40.517 00:00:14.226 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2026-01-09 18:24:07.105 00:00:10.378 TCP 23.104.0.1:57562 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:19:30.496 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:24:30.611 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:19:30.494 00:05:54.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:24:30.251 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:24:44.785 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2026-01-09 18:25:07.522 00:00:10.367 TCP 23.104.0.1:59822 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:25:45.012 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58034 10 6452 1 2026-01-09 18:26:07.932 00:00:10.387 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:26:45.230 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57534 10 6452 1 2026-01-09 18:27:08.359 00:00:10.358 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:27:45.443 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43508 10 6452 1 2026-01-09 18:28:08.759 00:00:10.371 TCP 23.104.0.1:44048 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:28:45.656 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60970 10 6452 1 2026-01-09 18:29:09.164 00:00:10.364 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:29:29.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:29:29.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:29:45.832 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:55292 10 6452 1 2026-01-09 18:25:30.499 00:05:54.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:30:09.567 00:00:10.367 TCP 23.104.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:25:30.496 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:30:46.087 00:00:10.543 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2026-01-09 18:31:09.974 00:00:10.344 TCP 23.104.0.1:58046 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:31:46.670 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48886 10 6452 1 2026-01-09 18:32:10.367 00:00:10.363 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:32:46.879 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44332 10 6452 1 2026-01-09 18:33:10.767 00:00:10.378 TCP 23.104.0.1:38842 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:33:47.117 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35210 10 6452 1 2026-01-09 18:34:11.182 00:00:10.368 TCP 23.104.0.1:40100 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:34:29.741 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:34:29.885 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:34:47.336 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34656 10 6452 1 2026-01-09 18:35:11.583 00:00:10.375 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:35:47.561 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60450 10 6452 1 2026-01-09 18:31:30.500 00:05:54.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:36:11.988 00:00:10.368 TCP 23.104.0.1:49566 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:31:30.497 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:36:47.735 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 10 6452 1 2026-01-09 18:37:12.388 00:00:14.886 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:37:47.990 00:00:10.275 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2026-01-09 18:38:17.333 00:00:10.366 TCP 23.104.0.1:39038 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:38:48.320 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2026-01-09 18:39:30.207 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:39:17.740 00:00:10.320 TCP 23.104.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:39:29.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:39:48.534 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6452 1 2026-01-09 18:40:18.108 00:00:10.363 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:40:48.752 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55496 10 6452 1 2026-01-09 18:41:18.514 00:00:10.360 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:41:48.960 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35760 10 6452 1 2026-01-09 18:37:30.501 00:05:54.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:37:30.497 00:05:54.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:42:18.911 00:00:10.368 TCP 23.104.0.1:58434 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:42:49.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35666 10 6452 1 2026-01-09 18:43:19.314 00:00:10.365 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:43:49.400 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42916 10 6452 1 2026-01-09 18:44:30.346 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:44:19.721 00:00:10.381 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:44:30.274 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:44:49.577 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2026-01-09 18:45:20.135 00:00:10.367 TCP 23.104.0.1:33336 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:45:49.746 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2026-01-09 18:46:20.542 00:00:10.360 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:46:49.953 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60108 10 6452 1 2026-01-09 18:47:20.948 00:00:10.377 TCP 23.104.0.1:33956 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:47:50.184 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6452 1 2026-01-09 18:43:30.502 00:05:54.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:43:30.501 00:05:54.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:48:21.362 00:00:10.368 TCP 23.104.0.1:48090 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:48:50.362 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42026 10 6452 1 2026-01-09 18:49:30.125 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:49:30.243 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:49:21.769 00:00:10.323 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:49:50.578 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2026-01-09 18:50:22.140 00:00:10.365 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:50:50.794 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2026-01-09 18:51:22.549 00:00:10.361 TCP 23.104.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:51:51.007 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34314 10 6452 1 2026-01-09 18:52:22.953 00:00:10.325 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:52:51.231 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38810 10 6452 1 2026-01-09 18:53:23.314 00:00:10.324 TCP 23.104.0.1:60190 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:53:51.460 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2026-01-09 18:49:30.506 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 18:49:30.502 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 18:54:30.072 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 18:54:30.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 18:54:23.679 00:00:10.376 TCP 23.104.0.1:51598 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:54:51.682 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6452 1 2026-01-09 18:55:24.113 00:00:10.360 TCP 23.104.0.1:36702 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:55:51.872 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50784 10 6452 1 2026-01-09 18:56:24.518 00:00:10.321 TCP 23.104.0.1:39006 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:56:52.124 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54956 10 6452 1 2026-01-09 18:57:24.881 00:00:10.392 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2026-01-09 18:57:52.351 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6452 1 2026-01-09 18:58:25.308 00:00:10.443 TCP 23.104.0.1:52586 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1039, avg pps: 0, avg bpp: 314 Time window: 2026-01-09 17:55:30 - 2026-01-09 18:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0021s Wall: 0.0021s flows/second: 76022.6 Runtime: 0.0022s